Hi Dominick , Thanks for inputs . a) This is an embedded board which logs in by default as a ROOT user. Any pointers as to where can i look to debug the cause due to which context is "system_u" b) Apologies , but can you please help method / approach / debug points by which -> I can evaluate the expected contexts for root & testuser -> I can see that the labels are created using ls -alZ . Is there any other method / debug point to check filesystems are labeled according to the policy. ( as i am using standard refpolicy to create an default policy on board ) Thanks , Ashish